Abstract:Cloud computing, as an emerging computing paradigm, greatly facilitates resource sharing and enables providing computing power as services over the Internet. However, it also brings new challenges for security and access control, especially in infrastructure as a service clouds. The introduction of virtualization layer increases new security risks, which should be restricted and confined by more stringent access control techniques. In this paper, we propose a flexible and fine-grained access control framework, named IaaS-oriented Hybrid Access Control (iHAC), which combines the advantages of both the role-based access control and type enforcement model. We consider access control issues from the perspective of virtual machines. A permission transition model is designed to dynamically assign permissions to virtual machines. A Virtual Machine Monitor (VMM)-based access control mechanism is presented to confine the virtual machine's behaviors in a fine-grained manner. A VMM-enabled network access control approach is proposed to regulate the communication among virtual machines. iHAC is successfully implemented in the Internet based Virtual Computing Infrastructure (iVIC) platform, and several experiments are conducted to evaluate its effectiveness and efficiency. The results show that iHAC can make correct access control decisions with low performance overhead. Copyright (c) 2015John Wiley & Sons, Ltd.

Access control models for cloud computing

Design and Implementation of Access Control As a Service for IaaS Cloud

Survey of Access Control Models and Technologies for Cloud Computing.

ACaaS: Access Control as a Service for IaaS Cloud

Access Control Security Model Based on Behavior in Cloud Computing Environment

iHAC: A Hybrid Access Control Framework for IaaS Clouds

Toward a flexible and fine-grained access control framework for infrastructure as a service clouds: Toward a flexible and fine-grained access control framework for infrastructure as a service clouds

An Access Control Model for Scientific Computing Cloud Service--CAQF

A new RBAC based access control model for cloud computing

Survey on Access Control Technologies for Cloud Computing

Multi-tenancy access control model for IaaS cloud

Service Security Architecture and Access Control Model for Cloud Computing

The Design of a Trust and Role Based Access Control Model in Cloud Computing

Multi-Tenancy Based Access Control in Cloud

Key Techniques of Access Control for Cloud Computing

MTBAC: A Mutual Trust Based Access Control Model in Cloud Computing

Data access control model based on data's role and attributes for cloud computing

Research and Implementation on Access Control of Management-Type SaaS

Attribute-based access control model for cloud computing

On the research and implementation of IaaS network security architecture

Multi-level Security Model Based on Noninterference Theory in Cloud